MCP Agent feature is now added to StorefrontLearn more →

Team Collaboration, RBAC Roles & Staff Permissions

July 25, 2026


Enterprise Team Collaboration & RBAC in Webito

As your business scales, delegating operational workflows while safeguarding financial ledger integrity becomes critical. Webito implements enterprise-grade Role-Based Access Control (RBAC).

1. Standard Operational Roles & Segregation of Duties

  • Store Owner: Exclusive sovereign authority over legal entities, payout destinations, billing plans, and store transfer.
  • Store Operations Manager: Comprehensive daily access spanning product catalogs, campaigns, promotions, and checkout pipelines.
  • Fulfillment & Warehouse Specialist: Scoped strictly to pending pick-and-pack orders, carrier dispatch token entry, and stock counts.
  • Customer Care Agent: Access limited to ticket resolutions, buyer correspondence, and internal order annotations.
  • Finance & Accounting Specialist: Unrestricted access to ledger exports, tax reports, and revenue analytics, without write-access to catalog settings.
The Principle of Least Privilege

Webito enforces least-privilege boundaries. Fulfillment operators cannot inspect gross margins, and customer support agents cannot alter gateway credentials.

2. Inviting Staff & Secure Onboarding

  1. In your dashboard, open Settings > Team & Roles.
  2. Click "Invite Member", provide their corporate email or mobile identifier, and designate their RBAC role.
  3. A cryptographically signed invitation link is dispatched. Staff accept and authenticate using isolated credentials.
Immutable Audit Logging

High-consequence mutations (manual inventory overrides, refunds, staff removals) are recorded in an append-only audit trail with timestamps and user identifiers.